Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sudo Perl环境变量处理安全性绕过漏洞
Vulnerability Description
Sudo 1.6.8 p12之前的版本，在Perl taint旗标关闭时，不会清除(1) PERLLIB、(2) PERL5LIB和(3) PERL5OPT环境变量，有限的本地用户可以使Perl脚本包含并执行与脚本包含的程序库文件具有相同名称的任意程序库文件。
CVSS Information
N/A
Vulnerability Type
N/A